Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/n-jYW3TtB-3xqB2bSX1FBgJznUA.roa
File: n-jYW3TtB-3xqB2bSX1FBgJznUA.roa (raw, json)
Hash identifier: o6wnmb3KQIJ7ZwCfbyHPmnS166j6EiJX08Afnad5JbA=
Subject key identifier: 9F:E8:D8:5B:74:ED:07:ED:F1:A8:1D:9B:49:7D:45:06:02:73:9D:40
Certificate issuer: /CN=00d0a95be0e601109cb19884268ba2204455c790
Certificate serial: 01942369D082FB32B3DE67F31811E9C770B1
Authority key identifier: 00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/n-jYW3TtB-3xqB2bSX1FBgJznUA.roa
Signing time: Wed 01 Jan 2025 19:48:44 +0000
ROA not before: Wed 01 Jan 2025 19:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202363
IP address blocks: 185.255.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d0:82:fb:32:b3:de:67:f3:18:11:e9:c7:70:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00d0a95be0e601109cb19884268ba2204455c790
Validity
Not Before: Jan 1 19:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fe8d85b74ed07edf1a81d9b497d450602739d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:d4:69:25:2f:18:f0:b0:4b:f1:18:b6:aa:
a2:b8:93:3e:68:64:bc:f2:7f:78:80:96:6a:c5:d0:
d0:70:59:57:fb:9e:83:4f:f2:32:73:2b:2c:4b:47:
e0:8a:94:06:45:05:26:45:23:de:09:42:b0:34:37:
a7:b8:bd:8b:ce:05:bb:25:19:38:f0:a5:61:3e:ae:
9a:e2:f6:86:8f:10:6c:37:68:27:b5:4e:fd:fa:be:
ec:40:38:c6:78:86:e3:a5:4a:e1:21:24:5d:d3:95:
f8:34:b8:f3:06:c1:dc:a2:ef:6f:71:cf:7e:38:7d:
f8:2b:87:3a:05:37:3b:2f:1c:a0:ab:67:78:6d:70:
91:a4:ca:ba:4a:62:60:b3:10:45:d3:59:27:b6:e1:
6a:01:89:d9:85:7f:a8:b1:36:5f:79:cb:b9:c0:82:
0c:2c:94:b2:49:57:a4:04:62:cf:f4:24:f7:62:52:
a9:f0:6a:ac:fa:de:4a:06:59:c0:fd:b8:88:d7:95:
66:71:aa:bf:4f:14:a1:4d:3d:71:f4:8f:08:70:24:
74:02:fd:96:ff:ff:2e:56:05:22:ca:8c:a5:cd:16:
cf:9a:ba:50:19:c7:09:be:4c:fb:c2:b6:ce:f3:19:
8a:c0:a5:6b:54:6f:44:48:89:82:05:40:b3:ba:d0:
01:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:D8:5B:74:ED:07:ED:F1:A8:1D:9B:49:7D:45:06:02:73:9D:40
X509v3 Authority Key Identifier:
keyid:00:D0:A9:5B:E0:E6:01:10:9C:B1:98:84:26:8B:A2:20:44:55:C7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ANCpW-DmARCcsZiEJouiIERVx5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/n-jYW3TtB-3xqB2bSX1FBgJznUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2e5a34-5ae3-4cbe-9090-d1fd4da2d5cb/1/ANCpW-DmARCcsZiEJouiIERVx5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:8d:cf:92:5e:2f:b5:31:6a:31:02:e3:7e:b5:82:8d:80:86:
47:11:07:7b:b2:a7:a7:4e:bf:fe:33:7f:32:a1:95:9e:fc:b5:
a5:89:40:bb:a3:4c:1d:69:9e:ed:a3:b3:40:a8:b5:74:0e:17:
20:98:55:16:68:c4:b8:ae:ca:60:f2:8f:21:87:27:8a:8a:1b:
ec:c9:4f:48:40:77:12:1f:cc:8f:68:9c:29:14:5a:c2:3c:10:
af:6a:b3:75:46:7b:41:ab:fe:04:85:22:b8:49:de:36:83:d4:
86:c4:51:3d:74:3e:0c:79:40:e5:be:f7:29:c4:f9:06:e0:e3:
63:e9:a3:c5:d4:38:a5:35:aa:e4:a3:76:7f:49:34:03:e8:b7:
c6:6d:7f:f0:c9:03:5f:60:12:f6:67:8a:0b:ec:51:63:66:62:
63:32:be:a6:d5:0d:06:52:9c:14:81:72:b6:ef:8c:26:eb:bc:
e8:9c:52:4c:21:1d:f2:9f:cd:d2:f6:ef:1b:9a:a4:b6:63:1c:
6f:21:f2:ac:71:db:9a:f8:4c:8c:a4:81:cc:31:c8:df:fa:f6:
49:0a:fa:f6:ab:f6:7e:8c:37:fb:d4:78:f0:f4:e6:45:1e:85:
fc:f3:1f:3a:8c:e0:0c:6e:33:07:c8:a0:08:4d:cf:7e:77:d8:
2c:3d:47:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:39 2025 by rpki-client